1. Receive request — agency or individual emails you asking for Staff access
2. Verify — authenticate their identity and institution affiliation
3. Create account — use the "Add Staff Member" form below (email, name, role, institution)
4. Generate code — click Generate next to their name in the staff table
5. Send code — copy the 8-character code and share it privately (phone, secure message, etc.)
6. They sign in — staff visits /staff/login.html, enters email + code, receives magic link

Important: The code is shown once — copy it immediately. It expires in 7 days and is consumed on first use. If lost, click Generate again.